Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
File:                     tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json)
Hash identifier:          2cw0YiGjV2Ck2km6nXodm2Cw7vKWaO1z0GAsnG9DRpc=
Subject key identifier:   AA:F3:BA:B7:F9:42:9D:49:59:DD:79:C1:2A:A4:9E:E0:F5:77:F6:9C
Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05
Certificate issuer:       /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
Certificate serial:       05FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
Manifest number:          0661
Signing time:             Mon 02 Mar 2026 00:36:24 +0000
Manifest this update:     Mon 02 Mar 2026 00:36:20 +0000
Manifest next update:     Mon 09 Mar 2026 00:36:20 +0000
Files and hashes:         1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: wk7evu3M90IZsgfe2mAbYhjGFsWNl0xtwJ6Gx6YwlyM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl
                          rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105
        Validity
            Not Before: Mar  2 00:36:20 2026 GMT
            Not After : Mar  9 00:36:20 2026 GMT
        Subject: CN=69a4db87-7455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:04:2a:23:ac:a9:b2:77:89:ef:25:a0:b7:0a:
                    2d:a7:ae:6e:5d:f2:f4:66:d8:4d:8a:22:fc:f1:0f:
                    a7:3e:71:4c:bd:91:6f:53:3e:e5:6e:d3:09:3d:a1:
                    6b:03:61:d7:aa:ca:5d:36:0c:0f:f4:b8:35:37:6d:
                    a3:e8:9c:31:c4:93:59:ab:2a:87:ab:09:57:82:83:
                    a8:9e:66:77:6c:3d:ae:4d:51:92:fe:95:ca:75:54:
                    8b:69:41:6f:2b:8e:47:38:86:38:3f:d2:a9:bd:b2:
                    88:53:ff:26:6b:0b:a5:c7:dc:05:99:80:d4:89:78:
                    74:5d:06:d1:cf:af:b3:86:8c:65:92:6c:d5:44:8a:
                    72:c9:6b:2e:dc:6f:ef:6f:a0:37:4a:0c:cb:9d:a2:
                    7f:d8:5e:03:91:40:05:0b:33:7e:4d:31:df:48:69:
                    24:3e:ce:d9:0d:e4:dc:a5:a3:0e:e1:52:a1:eb:b0:
                    83:2b:9b:1b:a0:4e:53:61:a8:5f:13:59:68:d5:30:
                    f3:55:73:c3:db:76:13:74:c1:b7:3f:e0:6d:34:73:
                    82:48:bd:08:97:3a:f0:10:3f:0e:78:b1:75:c0:15:
                    f4:8c:4a:cb:f8:f8:ec:78:18:68:00:ea:e2:0b:2d:
                    a5:ca:c2:de:1f:ca:b3:5c:e8:86:60:de:d9:1f:2c:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F3:BA:B7:F9:42:9D:49:59:DD:79:C1:2A:A4:9E:E0:F5:77:F6:9C
            X509v3 Authority Key Identifier:
                keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4b:39:fb:fe:85:02:a8:86:fc:f1:4f:c3:d7:38:42:24:29:
         6f:78:cc:e7:9d:16:74:49:c4:8b:1b:b8:76:45:bb:2c:07:83:
         1e:7e:88:60:5f:32:71:c2:f6:df:4f:96:59:35:fd:52:cc:c5:
         c0:c2:14:3d:b6:70:b4:83:39:92:3d:ed:6d:b2:a9:d9:e1:4b:
         6d:75:66:da:fc:4e:7f:cc:d7:c8:d0:65:cc:d9:aa:05:b6:00:
         63:dd:1b:92:67:0e:8f:88:6a:0d:3d:01:d2:fe:67:d7:d0:3b:
         e5:34:4b:d3:e2:1b:88:48:2d:24:60:fb:07:e2:44:eb:1d:4e:
         55:fd:f3:07:5e:ed:e7:d8:e7:82:2b:4f:e6:b1:31:56:b4:85:
         a0:be:f3:b1:1e:b7:91:36:e5:a9:9c:b1:43:68:c0:41:a0:18:
         ef:db:b0:4a:9c:dc:e7:e9:73:fc:68:ec:aa:db:fe:4c:71:8a:
         21:13:0b:08:20:0e:70:73:2a:cf:ae:5a:df:71:25:47:5a:58:
         c7:ee:45:c2:1f:4e:fe:cb:23:e6:db:ca:66:72:66:65:27:8c:
         68:1c:ea:69:1b:26:5e:0b:e2:7f:55:55:ac:8f:48:97:7f:11:
         8e:d9:a2:74:4d:62:cb:71:a5:ab:86:8a:d7:99:53:35:37:19:
         79:4c:d8:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:53 2026 by rpki-client